[ English | español | Deutsch | русский | Indonesia | English (United Kingdom) ]

Scaling your environment

This is a draft environment scaling page for the proposed OpenStack-Ansible operations guide.

Add a new infrastructure host

While three infrastructure hosts are recommended, if further hosts are needed in an environment, it is possible to create additional nodes.

Предупреждение

Make sure you back up your current OpenStack environment before adding any new nodes. See Back up and restore your cloud for more information.

1. Add the node to the infra_hosts stanza of the /etc/openstack_deploy/openstack_user_config.yml

   infra_hosts:
   [...]
     infra<node-ID>:
       ip: 10.17.136.32
   

2. Change to playbook folder on the deployment host.

   # cd /opt/openstack-ansible
   

3. To prepare new hosts and deploy containers on them run setup-hosts.yml playbook with the limit argument.

   # openstack-ansible openstack.osa.setup_hosts --limit localhost,infra<node-ID>,infra<node-ID>-host_containers
   

4. In case you’re relying on /etc/hosts content, you should also update it for all hosts

   # openstack-ansible openstack.osa.openstack_hosts_setup -e openstack_hosts_group=all --tags openstack_hosts-file
   

5. Next we need to expand galera/rabbitmq clusters, which is done during setup-infrastructure.yml. So we will run this playbook without limits.

   Предупреждение

   Make sure that containers from new infra host does not appear in inventory as first one for groups galera_all, rabbitmq_all and repo_all. You can varify that with ad-hoc commands:

   # ansible -m debug -a "var=groups['galera_all'][0]" localhost
   # ansible -m debug -a "var=groups['rabbitmq_all'][0]" localhost
   # ansible -m debug -a "var=groups['repo_all'][0]" localhost
   

   # openstack-ansible openstack.osa.setup_infrastructure -e galera_force_bootstrap=true
   

6. Once infrastructure playboks are done, it’s turn of openstack services to be deployed. Most of the services are fine to be ran with limits, but some, like keystone, are not. So we run keystone playbook separately from all others:

   # openstack-ansible openstack.osa.keystone
   # openstack-ansible openstack.osa.setup_openstack --limit '!keystone_all',localhost,infra<node-ID>,infra<node-ID>-host_containers
   

Test new infra nodes

After creating a new infra node, test that the node runs correctly by launching a new instance. Ensure that the new node can respond to a networking connection test through the ping command. Log in to your monitoring system, and verify that the monitors return a green signal for the new node.

Add a compute host

Use the following procedure to add a compute host to an operational cluster.

1. Configure the host as a target host. See the target hosts configuration section of the deploy guide. for more information.

2. Edit the /etc/openstack_deploy/openstack_user_config.yml file and add the host to the compute_hosts stanza.

   If necessary, also modify the used_ips stanza.

3. If the cluster is utilizing Telemetry/Metering (ceilometer), edit the /etc/openstack_deploy/conf.d/ceilometer.yml file and add the host to the metering-compute_hosts stanza.

4. Run the following commands to add the host. Replace NEW_HOST_NAME with the name of the new host.

   # cd /opt/openstack-ansible/playbooks
   # openstack-ansible openstack.osa.setup_hosts --limit localhost,NEW_HOST_NAME
   # openstack-ansible openstack.osa.openstack_hosts_setup -e openstack_hosts_group=nova_compute --tags openstack_hosts-file
   # openstack-ansible openstack.osa.setup_openstack --limit localhost,NEW_HOST_NAME
   

   Alternatively you can try using new compute nodes deployment script /opt/openstack-ansible/scripts/add-compute.sh.

   You can provide this script with extra tasks that will be executed before or right after OSA roles. To do so you should set environment variables PRE_OSA_TASKS or POST_OSA_TASKS with plays to run devided with semicolon:

   # export POST_OSA_TASKS="/opt/custom/setup.yml --limit HOST_NAME;/opt/custom/tasks.yml --tags deploy"
   # /opt/openstack-ansible/scripts/add-compute.sh HOST_NAME,HOST_NAME_2
   

Test new compute nodes

After creating a new node, test that the node runs correctly by launching an instance on the new node.

$ openstack server create --image IMAGE --flavor m1.tiny \
--key-name KEY --availability-zone ZONE:HOST:NODE \
--nic net-id=UUID SERVER

Ensure that the new instance can respond to a networking connection test through the ping command. Log in to your monitoring system, and verify that the monitors return a green signal for the new node.

Remove a compute host

The openstack-ansible-ops repository contains a playbook for removing a compute host from an OpenStack-Ansible environment. To remove a compute host, follow the below procedure.

Примечание

This guide describes how to remove a compute node from an OpenStack-Ansible environment completely. Perform these steps with caution, as the compute node will no longer be in service after the steps have been completed. This guide assumes that all data and instances have been properly migrated.

1. Disable all OpenStack services running on the compute node. This can include, but is not limited to, the nova-compute service and the neutron agent service.

   Примечание

   Ensure this step is performed first

   # Run these commands on the compute node to be removed
   # stop nova-compute
   # stop neutron-linuxbridge-agent
   

2. Clone the openstack-ansible-ops repository to your deployment host:

   $ git clone https://opendev.org/openstack/openstack-ansible-ops \
     /opt/openstack-ansible-ops
   

3. Run the remove_compute_node.yml Ansible playbook with the host_to_be_removed user variable set:

   $ cd /opt/openstack-ansible-ops/ansible_tools/playbooks
   openstack-ansible remove_compute_node.yml \
   -e host_to_be_removed="<name-of-compute-host>"
   

4. After the playbook completes, remove the compute node from the OpenStack-Ansible configuration file in /etc/openstack_deploy/openstack_user_config.yml.

Recover a compute host failure

The following procedure addresses Compute node failure if shared storage is used.

Примечание

If shared storage is not used, data can be copied from the /var/lib/nova/instances directory on the failed Compute node ${FAILED_NODE} to another node ${RECEIVING_NODE}before performing the following procedure. Please note this method is not supported.

1. Re-launch all instances on the failed node.

2. Invoke the MySQL command line tool

3. Generate a list of instance UUIDs hosted on the failed node:

   mysql> select uuid from instances where host = '${FAILED_NODE}' and deleted = 0;
   

4. Set instances on the failed node to be hosted on a different node:

   mysql> update instances set host ='${RECEIVING_NODE}' where host = '${FAILED_NODE}' \
   and deleted = 0;
   

5. Reboot each instance on the failed node listed in the previous query to regenerate the XML files:

   # nova reboot —hard $INSTANCE_UUID
   

6. Find the volumes to check the instance has successfully booted and is at the login :

   mysql> select nova.instances.uuid as instance_uuid, cinder.volumes.id \
   as voume_uuid, cinder.volumes.status, cinder.volumes.attach_status, \
   cinder.volumes.mountpoint, cinder.volumes,display_name from \
   cinder.volumes inner join nova.instances on cinder.volumes.instance_uuid=nova.instances.uuid \
   where nova.instances.host = '${FAILED_NODE}';
   

7. If rows are found, detach and re-attach the volumes using the values listed in the previous query:

   # nova volume-detach $INSTANCE_UUID $VOLUME_UUID && \
   # nova volume-attach $INSTANCE_UUID $VOLUME_UUID $VOLUME_MOUNTPOINT
   

8. Rebuild or replace the failed node as described in add-compute-host.

Replacing failed hardware

It is essential to plan and know how to replace failed hardware in your cluster without compromising your cloud environment.

Consider the following to help establish a hardware replacement plan:

• What type of node am I replacing hardware on?

• Can the hardware replacement be done without the host going down? For example, a single disk in a RAID-10.

• If the host DOES have to be brought down for the hardware replacement, how should the resources on that host be handled?

If you have a Compute (nova) host that has a disk failure on a RAID-10, you can swap the failed disk without powering the host down. On the other hand, if the RAM has failed, you would have to power the host down. Having a plan in place for how you will manage these types of events is a vital part of maintaining your OpenStack environment.

For a Compute host, shut down the instance on the host before it goes down. For a Block Storage (cinder) host using non-redundant storage, shut down any instances with volumes attached that require that mount point. Unmount the drive within your operating system and re-mount the drive once the Block Storage host is back online.

Shutting down the Compute host

If a Compute host needs to be shut down:

1. Disable the nova-compute binary:

   # nova service-disable --reason "Hardware replacement" HOSTNAME nova-compute
   

2. List all running instances on the Compute host:

   # nova list --all-t --host <compute_name> | awk '/ACTIVE/ {print $2}' > \
   /home/user/running_instances && for i in `cat /home/user/running_instances`; do nova stop $i ; done
   

3. Use SSH to connect to the Compute host.

4. Confirm all instances are down:

   # virsh list --all
   

5. Shut down the Compute host:

   # shutdown -h now
   

6. Once the Compute host comes back online, confirm everything is in working order and start the instances on the host. For example:

   # cat /home/user/running_instances
   # do nova start $instance
     done
   

7. Enable the nova-compute service in the environment:

   # nova service-enable HOSTNAME nova-compute
   

Shutting down the Block Storage host

If a LVM backed Block Storage host needs to be shut down:

1. Disable the cinder-volume service:

   # cinder service-list --host CINDER SERVICE NAME INCLUDING @BACKEND
   # cinder service-disable CINDER SERVICE NAME INCLUDING @BACKEND \
   cinder-volume --reason 'RAM maintenance'
   

2. List all instances with Block Storage volumes attached:

   # mysql cinder -BNe 'select instance_uuid from volumes where deleted=0 '\
   'and host like "%<cinder host>%"' | tee /home/user/running_instances
   

3. Shut down the instances:

   # cat /home/user/running_instances | xargs -n1 nova stop
   

4. Verify the instances are shutdown:

   # cat /home/user/running_instances | xargs -n1 nova show | fgrep vm_state
   

5. Shut down the Block Storage host:

   # shutdown -h now
   

6. Replace the failed hardware and validate the new hardware is functioning.

7. Enable the cinder-volume service:

   # cinder service-enable CINDER SERVICE NAME INCLUDING @BACKEND cinder-volume
   

8. Verify the services on the host are reconnected to the environment:

   # cinder service-list --host CINDER SERVICE NAME INCLUDING @BACKEND
   

9. Start your instances and confirm all of the instances are started:

   # cat /home/user/running_instances | xargs -n1 nova start
   # cat /home/user/running_instances | xargs -n1 nova show | fgrep vm_state
   

Destroying Containers

1. To destroy a container, execute the following:

# openstack-ansible openstack.osa.containers_lxc_destroy --limit localhost,<container name|container group>

Примечание

You will be asked two questions:

Are you sure you want to destroy the LXC containers? Are you sure you want to destroy the LXC container data?

The first will just remove the container but leave the data in the bind mounts and logs. The second will remove the data in the bind mounts and logs too.

Предупреждение

If you remove the containers and data for the entire galera_server container group you will lose all your databases! Also, if you destroy the first container in many host groups you will lose other important items like certificates, keys, etc. Be sure that you understand what you’re doing when using this tool.

1. To create the containers again, execute the following:

   # cd /opt/openstack-ansible/playbooks
   # openstack-ansible openstack.osa.containers_lxc_create --limit localhost,lxc_hosts,<container name|container
     group>
   

   The lxc_hosts host group must be included as the playbook and roles executed require the use of facts from the hosts.

[ English | español | Deutsch | русский | Indonesia | English (United Kingdom) ]

Accessibility for multi-region Object Storage

In multi-region Object Storage utilizing separate database backends, objects are retrievable from an alternate location if the default_project_id for a user in the keystone database is the same across each database backend.

Важно

It is recommended to perform the following steps before a failure occurs to avoid having to dump and restore the database.

If a failure does occur, follow these steps to restore the database from the Primary (failed) Region:

1. Record the Primary Region output of the default_project_id for the specified user from the user table in the keystone database:

   Примечание

   The user is admin in this example.

   # mysql -e "SELECT default_project_id from keystone.user WHERE \
     name='admin';"
   
   +----------------------------------+
   | default_project_id               |
   +----------------------------------+
   | 76ef6df109744a03b64ffaad2a7cf504 |
   +-----------------—————————————————+
   

2. Record the Secondary Region output of the default_project_id for the specified user from the user table in the keystone database:

   # mysql -e "SELECT default_project_id from keystone.user WHERE \
     name='admin';"
   
   +----------------------------------+
   | default_project_id               |
   +----------------------------------+
   | 69c46f8ad1cf4a058aa76640985c     |
   +----------------------------------+
   

3. In the Secondary Region, update the references to the project_id to match the ID from the Primary Region:

   # export PRIMARY_REGION_TENANT_ID="76ef6df109744a03b64ffaad2a7cf504"
   # export SECONDARY_REGION_TENANT_ID="69c46f8ad1cf4a058aa76640985c"
   
   # mysql -e "UPDATE keystone.assignment set \
   target_id='${PRIMARY_REGION_TENANT_ID}' \
   WHERE target_id='${SECONDARY_REGION_TENANT_ID}';"
   
   # mysql -e "UPDATE keystone.user set \
   default_project_id='${PRIMARY_REGION_TENANT_ID}' WHERE \
   default_project_id='${SECONDARY_REGION_TENANT_ID}';"
   
   # mysql -e "UPDATE keystone.project set \
   id='${PRIMARY_REGION_TENANT_ID}' WHERE \
   id='${SECONDARY_REGION_TENANT_ID}';"
   

The user in the Secondary Region now has access to objects PUT in the Primary Region. The Secondary Region can PUT objects accessible by the user in the Primary Region.